Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215617.roa
File: AS215617.roa (raw, json)
Hash identifier: 19iy7ugiDHQPXxUNtLAWsi+jGD0saUanmikcEpgvct8=
Subject key identifier: E4:9B:A5:89:5F:0C:8C:AA:C2:C3:26:8B:BC:64:5A:F8:66:3C:67:8B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4CBF7C1DB45AE588FCB709CB17EB331087C6C172
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215617.roa
Signing time: Fri 23 Aug 2024 08:01:22 +0000
ROA not before: Fri 23 Aug 2024 07:56:22 +0000
ROA not after: Fri 22 Aug 2025 08:01:22 +0000
asID: 215617
IP address blocks: 2a0f:85c1:357::/48 maxlen: 48
2a0f:85c1:363::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:bf:7c:1d:b4:5a:e5:88:fc:b7:09:cb:17:eb:33:10:87:c6:c1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:22 2024 GMT
Not After : Aug 22 08:01:22 2025 GMT
Subject: CN=E49BA5895F0C8CAAC2C3268BBC645AF8663C678B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:3e:7f:2c:49:16:18:f1:79:fa:da:08:ad:
da:86:c8:6e:88:68:1a:57:ec:ea:3c:9a:d4:40:7d:
9e:3a:cf:13:7a:97:3a:95:9c:69:86:35:ec:c4:c4:
61:8b:e1:7f:83:34:70:49:c3:33:32:ab:5a:8c:6d:
39:a2:fa:f8:f1:99:08:d2:86:96:46:1e:e9:99:36:
d4:3d:79:5c:7a:73:d3:aa:72:ef:a2:b8:0c:93:3e:
6c:ec:89:11:57:e9:d5:80:5b:e1:26:24:61:3f:0a:
45:cc:da:1c:7c:e7:cd:fc:eb:60:10:ea:94:60:b6:
b1:ae:71:07:6c:0c:93:3f:69:04:85:50:a0:32:29:
5d:bb:94:be:57:c3:8a:a0:8e:e1:c8:c0:36:6f:fb:
e1:07:5f:d9:42:8c:54:2d:40:fb:66:21:1b:e0:1a:
fe:a4:d3:82:78:60:4b:38:c3:ec:d9:7e:6c:af:ce:
99:e8:02:14:bb:a9:a6:3e:40:4f:5c:81:a8:58:d6:
1b:b7:30:42:fa:02:66:bd:4f:5c:72:fd:f4:04:91:
c0:aa:b8:49:00:33:9c:bc:ea:34:ee:61:61:84:3b:
e7:be:53:bf:01:3e:b8:5a:6f:3e:d2:3b:af:fa:d1:
16:23:11:82:c7:df:65:e9:d7:29:b9:1a:4a:7d:f8:
35:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9B:A5:89:5F:0C:8C:AA:C2:C3:26:8B:BC:64:5A:F8:66:3C:67:8B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215617.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:357::/48
2a0f:85c1:363::/48
Signature Algorithm: sha256WithRSAEncryption
76:6c:ab:ff:54:30:f8:3c:cf:38:80:c2:7e:4d:ca:55:99:39:
66:30:de:4d:cb:6c:7c:6c:b9:8f:a6:55:c7:c8:88:e2:57:61:
24:50:cb:3e:25:ee:5a:a5:96:b0:23:ba:29:a9:d7:fe:73:2a:
f6:cf:2a:8b:da:ea:db:8f:07:d7:6f:b0:bf:66:34:96:98:c9:
66:13:c9:7f:41:1d:83:31:a4:57:82:ea:6c:5a:ab:39:78:74:
c9:b6:59:ca:76:1e:da:e8:0d:8b:a2:7a:bd:2a:1d:81:b1:c8:
a4:ba:83:b8:58:14:d4:eb:bb:73:d3:2d:ba:0f:37:88:55:14:
39:20:f2:b3:24:eb:a0:c0:04:04:14:2f:fe:c5:d9:9f:47:f0:
92:7b:3a:21:ad:18:21:86:9b:a4:76:b4:40:49:8a:09:fc:04:
a8:60:17:27:26:63:75:a9:7f:3f:aa:03:95:56:58:b1:e0:c3:
f5:39:9e:7e:01:de:0b:f5:27:78:60:f9:01:ef:27:1b:38:a0:
c9:d2:51:3e:2b:e2:c7:8a:bc:b9:39:af:1e:74:bd:7c:07:a6:
05:48:3d:91:25:ef:66:6b:29:c2:13:08:b2:f6:02:a7:90:ad:
de:12:e1:4b:b5:10:6f:1b:7b:57:3e:59:b7:56:c4:5e:c8:72:
b6:28:d8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org